D-Link DCS-5300G, DCS-2120, DCS-900 warranty VPN Software, DFL-M510 Information Security Gateway

Firewalls Guide

FIREWALLS
Model		DFL-800	DFL-1600	DFL-2500
Image
		2 x WAN FE
Interfaces
	Fast Ethernet interfaces (FE)	1 x DMZ FE	6 x Configurable GbE	8 x Configurable GbE
		7 x LAN FE
	Firewall throughput	150Mbps	320Mbps	600Mbps
System performance	VPN throughput	60Mbps	120Mbps	300Mbps
	Concurrent sessions	25,000	400,000	1,000,000
	Policies	1,000	2,500	4,000
	PPPoE	✓	✓	✓
	Transparent mode	✓	✓	✓
	NAT, PAT	✓	✓	✓
Firewall system	Dynamic routing protocol	OSPF	OSPF	OSPF
	H.323 NAT traversal	✓	✓	✓
	Time-scheduled policies	✓	✓	✓
	Application Layer Gateway (ALG)	✓	✓	✓
	Proactive network security	ZoneDefense	ZoneDefense	ZoneDefense
	DHCP server/client	✓	✓	✓
	DHCP relay	✓	✓	✓
Networking	Policy-based routing	✓	✓	✓
	802.1q VLAN	✓	✓	✓
	IP Multicast support	IGMP, IGMP Snooping	IGMP, IGMP Snooping	IGMP, IGMP Snooping
	Encryption method:	All	All	All
	(DES/3DES/AES/Twofish/Blowfish/CAST-128)
VPN	Dedicated VPN tunnel	300	1,200	2,500
	PPTP/L2TP server	✓	✓	✓
	Hub and spoke	✓	✓	✓
	IPSec NAT traversal	✓	✓	✓
	Console interface	RS-232	RS-232	RS-232
	Web UI interface	HTTP, HTTPS	HTTP, HTTPS	HTTP, HTTPS
System management	Command line/SSH	✓	✓	✓
	Upgrade and Config backup/restore	✓	✓	✓
	Trusted host for remote management	✓	✓	✓
	Built-in database	✓	✓	✓
	External database	✓	✓	✓
	• RADIUS
User authentication	• LDAP	✓	✓	✓
	• Active Directory	✓	✓	✓
	IP and MAC binding	✓	✓	✓
	XAUTH for IPSec	✓	✓	✓
	authentication
	Internal log	✓	✓	✓
	External log	Syslog Server	Syslog Server	Syslog Server
Logging and monitoring	Email notification	✓	✓	✓
	External report server*	WebTrends, FirewallAnalyzer	WebTrends, FirewallAnalyzer	WebTrends, FirewallAnalyzer
	Event log and alarm	✓	✓	✓
	SNMP	SNMP v1, v2c	SNMP v1, v2c	SNMP v1, v2c
	Outbound load balancing	✓	✓	✓
Traffic load balance	Server load balancing	✓	✓	✓
	Support load balance algorithms	3 types	3 types	3 types
	Traffic redirect when failover	✓	✓	✓
	Policy-based traffic shaping	✓	✓	✓
Bandwidth management	Guarantee bandwidth	✓	✓	✓
	Maximum bandwidth	✓	✓	✓
	Priority bandwidth	✓	✓	✓
	WAN failover	✓	✓	✓
	Active-Passive mode		✓	✓
High Availability (HA)	Device failure detection		✓	✓
	Link failure detection		✓	✓
	FW/VPN session SYN		✓	✓
	NIDS pattern	✓	✓	✓
	Automatic pattern update	✓	✓	✓
Intrusion Detection Service (IDS)	DoS, DDoS protection	✓	✓	✓
	Customisable detection signature	✓	✓	✓
	Attack alarm via email	✓	✓	✓
	HTTP type	URL, Keyword	URL, Keyword	URL, Keyword
Content filtering	Script type	Java, Cookie, ActiveX, VB	Java, Cookie, ActiveX, VB	Java, Cookie, ActiveX, VB
	Email type	Black list, keyword	Black list, keyword	Black list, keyword
IM/P2P blocking	Instant message support	MSN, Yahoo, SoftEther	MSN, Yahoo, SoftEther	MSN, Yahoo, SoftEther
	Peer to peer support	Skype, eMule	Skype, eMule	Skype, eMule

* Firmware Release 2

VPN Software	DS-601 VPN Client Software (1 User License)
	DS-605 VPN Client Software (5 User License)
IPS Subscription Packages	DFL800IPS12 12 months IPS subscription pack for DFL-800
	DFL1600IPS12 12 months IPS subscription pack for DFL-1600
	DFL2500IPS12 12 months IPS subscription pack for DFL-2500

ALSO AVAILABLE

DFL-M510 Information Security Gateway

Controls & Manages Instant Messaging/Peer-to-Peer

Applications to secure the network against emerging risks.

www.dlink.co.uk tel: +44 (0)20 8955 9000

All D-Link Firewalls come with a 2-year

Local variations may occur. The information is correct at time of publication. D-Link will not be held liable for any changes to this information.

warranty and FREE lifetime technical support.